CVE-2023-25956 Apache Airflow AWS Provider: Arbitrary file read via AWS provider

2023-02-2411:48:33

CWE-209

apache

www.cve.org

apache airflow

aws

arbitrary file read

sensitive information

security vulnerability

EPSS

0.001

Percentile

48.0%

JSON

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.

This issue affects Apache Airflow AWS Provider versions before 7.2.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow AWS Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "7.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]